Microsoft Entra ID

Microsoft Entra ID (formerly Azure AD) connects to Authdog over OpenID Connect. Entra stays the system of record for your workforce; Authdog fronts your application and consumes the ID token.

Copy the redirect URL

In the Authdog console, select the project and environment, open Authentication > Providers, find Microsoft Entra ID, and click Enable. Copy the Redirect / Callback URL:

https://identity.authdog.com/api/v1/callback/<connectionId>

Each environment has its own connection id, so its own redirect URL.

Register the application in Entra

1. In the Entra admin center, open Identity > Applications > App registrations and click New registration.
2. Set a name, keep Accounts in this organizational directory only, and add a Web redirect URI with the Authdog callback URL.
3. Under Certificates & secrets, create a client secret and copy its value — it is shown once.
4. Copy the Application (client) ID from the Overview page.
5. Note the OpenID Connect metadata document URL, e.g. https://login.microsoftonline.com/<tenant-id>/v2.0/.well-known/openid-configuration.

Configure Authdog

Save, then toggle the connection active.

Test the connection

1. On the saved connection, click Test connection. Authdog validates the required fields, then fetches the discovery document and confirms it carries authorization_endpoint, token_endpoint, and jwks_uri. Failures come back with named codes — unreachable when the document cannot be fetched, missing_endpoint when it is the wrong document.
2. Then run a real login: open the Login URL, complete the Entra prompt, and confirm the user appears under Users with an Entra identity linked.

Rotate the secret

Entra client secrets expire. When one does:

1. Create a new secret under Certificates & secrets.
2. Paste it into the connection's Client secret field and save.

No downtime: the old secret keeps working until Entra expires it. Secret rotations are recorded in the environment audit log.

Troubleshooting

Related